ModuleNotFoundError: No module named 'pykms_RpcBind'

[MKletz]

Getting the following trying to run the latest builds of minimal and python3

Wed, 03 Dec 2025 18:19:54 INFO Log level: INFO
Wed, 03 Dec 2025 18:19:54 INFO not root user, cannot change uid/gid.
Traceback (most recent call last):
File "/home/py-kms/pykms_Server.py", line 17, in
import pykms_RpcBind, pykms_RpcRequest
ModuleNotFoundError: No module named 'pykms_RpcBind'

[didotb]

Did you git clone this repo? Based on the directory shown, it didn't seem like you did.

[MKletz]

@didotb no I just pulled the images, this was had been working for several months in a lab until I had to redeploy.

[didotb]

Did you grab the image from ghcr or docker hub? I just tried on my machine using ghcr and it's working perfectly fine, I can also activate machines and VMs.

I have tried latest, minimal, and python3

[MKletz]

ghcr

ghcr.io/py-kms-organization/py-kms:minimal

Is there any potential issues with root access being restricted in my lab? It's running Podman. The output implied it detected that and accounted for it.

[didotb]

It's running Podman.

I'm sorry I won't be able to help you with this one, I've not tried podman before. Although, a quick search does show some containers having problems being run rootless. Perhaps that's the problem you currently have? It could also be the folder permissions of your mounts, if you have one, is what's causing some files not being downloaded properly?

All speculations from somebody that hasn't slept yet, so take that with a pinch of salt.

[simonmicro]

@MKletz Yes, you are running into a problem where the container cannot drop its privileges anymore - because it does not have the needed ones in the first place.

With the recent release, I did a bit of hardening and the container sets its content to read-only before dropping its permissions. While doing that, it also hands over the ownership of the /home/py-kms folder before dropping into it. I assume that something is wrong with the permissions if this monachism cannot do this anymore.

Could you please post the rootless results of (the podman equivalent):

docker run --rm -it --entrypoint /bin/ls pykmsorg/py-kms:latest -laRh /home

...then I can guess what needs to be moved into the Dockerfile (again) for your setup to work.

[MKletz]

@simonmicro sorry for the delay fwiw the podman syntax was identical and running it under the root context worked. (Output below was non-root)

/home:
total 4K     
drwxr-xr-x    1 root     root          20 Nov 15 17:10 .
dr-xr-xr-x    1 root     root          28 Dec 15 19:07 ..
drwx--x--x    1 py-kms   users       4.0K Nov 15 17:07 py-kms

/home/py-kms:
total 432K   
drwx--x--x    1 py-kms   users       4.0K Nov 15 17:07 .
drwxr-xr-x    1 root     root          20 Nov 15 17:10 ..
-r--r--r--    1 root     root       70.4K Nov 15 17:07 KmsDataBase.xml
-r--r--r--    1 root     root       30.7K Nov 15 17:07 pykms_Aes.py
-r--r--r--    1 root     root       13.7K Nov 15 17:07 pykms_Base.py
-r--r--r--    1 root     root       23.0K Nov 15 17:07 pykms_Client.py
-r--r--r--    1 root     root       10.2K Nov 15 17:07 pykms_Connect.py
-r--r--r--    1 root     root        1.6K Nov 15 17:07 pykms_DB2Dict.py
-r--r--r--    1 root     root       28.6K Nov 15 17:07 pykms_Dcerpc.py
-r--r--r--    1 root     root        3.7K Nov 15 17:07 pykms_Filetimes.py
-r--r--r--    1 root     root       20.4K Nov 15 17:07 pykms_Format.py
-r--r--r--    1 root     root       78.1K Nov 15 17:07 pykms_Misc.py
-r--r--r--    1 root     root        4.0K Nov 15 17:07 pykms_PidGenerator.py
-r--r--r--    1 root     root         715 Nov 15 17:07 pykms_RequestUnknown.py
-r--r--r--    1 root     root        5.5K Nov 15 17:07 pykms_RequestV4.py
-r--r--r--    1 root     root        7.8K Nov 15 17:07 pykms_RequestV5.py
-r--r--r--    1 root     root        3.9K Nov 15 17:07 pykms_RequestV6.py
-r--r--r--    1 root     root        1.6K Nov 15 17:07 pykms_RpcBase.py
-r--r--r--    1 root     root        7.8K Nov 15 17:07 pykms_RpcBind.py
-r--r--r--    1 root     root        3.2K Nov 15 17:07 pykms_RpcRequest.py
-r--r--r--    1 root     root       32.2K Nov 15 17:07 pykms_Server.py
-r--r--r--    1 root     root        6.0K Nov 15 17:07 pykms_Sql.py
-r--r--r--    1 root     root       25.4K Nov 15 17:07 pykms_Structure.py
-r--r--r--    1 root     root        4.9K Nov 15 17:07 pykms_WebUI.py
-r--r--r--    1 root     root          29 Nov 15 17:07 requirements.txt
dr-xr-xr-x    1 root     root          17 Nov 15 17:07 static
dr-xr-xr-x    1 root     root          84 Nov 15 17:07 templates

/home/py-kms/static:
total 4K     
dr-xr-xr-x    1 root     root          17 Nov 15 17:07 .
drwx--x--x    1 py-kms   users       4.0K Nov 15 17:07 ..
dr-xr-xr-x    1 root     root          27 Nov 15 17:07 css

/home/py-kms/static/css:
total 204K   
dr-xr-xr-x    1 root     root          27 Nov 15 17:07 .
dr-xr-xr-x    1 root     root          17 Nov 15 17:07 ..
-r--r--r--    1 root     root      202.4K Nov 15 17:07 bulma.min.css

/home/py-kms/templates:
total 20K    
dr-xr-xr-x    1 root     root          84 Nov 15 17:07 .
drwx--x--x    1 py-kms   users       4.0K Nov 15 17:07 ..
-r--r--r--    1 root     root        1.7K Nov 15 17:07 base.html
-r--r--r--    1 root     root        3.0K Nov 15 17:07 clients.html
-r--r--r--    1 root     root         157 Nov 15 17:07 license.html
-r--r--r--    1 root     root        1.7K Nov 15 17:07 products.html

[kitsumed]

Recently updated my docker image to do some tests in a Windows VM and had the same issue. I removed my custom user for the default root one, enabled back capabilities of my container (CHOWN and SETGID) but am now getting the error

Traceback (most recent call last):

  File "/usr/bin/entrypoint.py", line 81, in <module>

    childProcess = subprocess.Popen(PYTHON3 + " -u /usr/bin/start.py", preexec_fn=change_uid_grp(loggersrv), shell=True)

                                                                                  ^^^^^^^^^^^^^^^^^^^^^^^^^

  File "/usr/bin/entrypoint.py", line 28, in change_uid_grp

    os.chmod("/home/py-kms", 0o700)

PermissionError: [Errno 1] Operation not permitted: '/home/py-kms'

The new version, which attempts to drop privileges, does not allow the user to drop additional privileges. Reverting to the previous version for now.

EDIT: Reverted to ghcr.io/py-kms-organization/py-kms@sha256:e68369b9a8bf139c6975934aa12d08713005e96f6bdf9d73ccd6a201604d64f8. Running as user 1001:1001 (rootless) with no docker capabilities, starts without issues.
Creation date is : 2024-06-10 06:19:00 if that helps